Security Operations Engineer 80–100% (m/f/d)

Ensure Security. Detect Threats. Evolve Solutions.

Does detecting cyberattacks, analyzing security incidents, and effectively protecting customer environments motivate you? Do you want to actively contribute to cybersecurity, develop detection mechanisms and automated security processes, and keep a cool head even during critical incidents? Do you enjoy specifically reducing security risks and implementing sustainable protective measures together with our customers? Then you've come to the right place!

We are looking for a

Security Operations Engineer 80–100% (m/f/d)

in Fehraltorf or Aarau

UPGREAT, headquartered in Fehraltorf with branches in Bern and Aarau, is your competent partner for outsourcing, modern work, and cloud solutions. Our corporate culture is based on three core values: Enthusiasm, Humanity, and Competence.

Your Responsibilities

• Operation & Development: You are responsible for the secure and stable operation, monitoring, and continuous development of our tooling, security services, and customer environments.

• Security Incident Management: You handle security events, incidents, and findings end-to-end – from triage and analysis through containment and customer communication to post-incident review and complete documentation.

• Detection Engineering & Automation: You develop and optimize detection use cases, playbooks, and automations, and sustainably reduce false positives by identifying and resolving their causes.

• Vulnerability & Patch Management: You manage vulnerability and patch management across multiple customer environments, especially for critical vulnerabilities and zero-day exploits. You prioritize measures based on exposure, exploitability, and risk.

• Security Services & Customer Consulting: Approximately 50% of your work involves providing billable security services directly to customers. This includes onboarding, security baselines, reviews, reporting, and technical consulting.

• Collaboration & Substitution: You work closely with Operations, Engineering, Key Account Management, CISO, and external security partners, and ensure reliable and continuous operation through mutual substitution.

• Continuous Improvement: You make a measurable contribution to reducing detection and response times (MTTD/MTTR), increasing detection coverage, and standardizing and scaling our security services.

• Toolmaking: You develop tools and scripts that simplify or fully automate manual processes, thereby contributing to the continuous improvement of our IT processes.

Your Profile

• Education & Experience: You have a completed IT education (EFZ/HF/FH) or equivalent practical experience in system, cloud, or security engineering, and at least three years of experience in SecOps, SOC/MDR, Incident Response, or Security Engineering, ideally in an MSP or customer environment.

• Microsoft Security: You have solid practical experience with Microsoft Defender XDR, Microsoft Sentinel, and Entra ID, and are proficient in using KQL for threat hunting and developing analytics rules.

• Security Operations: You are experienced in incident response, EDR/XDR, vulnerability management, and structured case handling and clean ticket documentation.

• Scripting & Automation: You automate recurring tasks with PowerShell. Knowledge of Python, the Microsoft Graph API, Logic Apps, and SIEM/SOAR solutions is an advantage.

• Holistic System Understanding: You understand the interrelationships and dependencies between identities, endpoints, networks, cloud, backup, applications, and operational processes, and maintain an overview even in complex environments.

• Analytical Strength: You approach technical challenges calmly, methodically, and solution-orientedly, and make well-founded decisions even under time pressure and with incomplete information.

• Communication & Customer Orientation: You communicate confidently and appropriately for the audience in German and have good English skills. You are able to explain technical matters comprehensibly to both specialists and management.

• Further Development & Certifications: You are motivated to continuously develop your security know-how. Certifications such as SC-200, SC-300, AZ-500, Security+ or GIAC are welcome. We actively support the acquisition of the SC-200 certification within twelve months.

Your Prospects at UPGREAT:

• You will become part of a dynamic, collegial team of over 150 employees, where collaboration counts just as much as individual strengths.

• An exciting field of activity with plenty of scope for action awaits you; taking responsibility is part of our culture.

• You will work in modern office spaces with ergonomically equipped workstations.

• Your social security is important to us; we cover 55% of your occupational pension contributions as well as the contribution to sickness daily allowance insurance.

• Your development is important to us; we promote your further education and accompany you on your professional journey.

• We appreciate your performance with attractive fringe benefits such as free parking spaces, a birthday gift, and special conditions at fitness studios and other partners.

Interested in joining us?

Convinced that you belong with us? Then please send us your application with your CV, certificates, and any certifications.

IMPORTANT: We only accept direct applications for this position. Files from recruitment agencies will be treated as direct applications, without any claim to fees.

Find Jobs in Switzerland on Arbeitnow